# Roadmap

This project is now in stabilization and production-readiness mode. Future work should stay incremental and avoid duplicating existing modules.

## Recommended Next Improvements

- Add a dedicated change history view for schedule resource changes.
- Add role-based notification preferences for admin, viewer, and cameraman users.
- Add a stronger email transport layer if hosting supports SMTP libraries.
- Add optional PDF generation after confirming Dompdf is installed.
- Add automated database backup scheduling outside the web request cycle.
- Add server-level protection rules for Nginx and IIS deployments.
- Add integration tests for schedule overlap checks across schedules, daily instances, and active plans.
- Add archived reports for completed terms or semesters.
- Add supervisor approval workflow for cameraman correction requests if required by operations.
- Add optional dashboard widgets for long-term utilization trends.

## Guardrails

- Do not rename existing modules without a migration plan.
- Do not overwrite `includes/db.php` during upgrades or restore.
- Keep MySQLi prepared statements for database access.
- Keep CSRF validation on all POST-changing actions.
- Keep Pakistan timezone and display formats consistent.
- Keep admin, viewer, and cameraman access separated.
